Case Study
1. Overview of the Incident
In December 2024, Bengaluru residents fell victim to a sophisticated scam in which fraudsters used Voice over Internet Protocol (VoIP) technology to impersonate senior traffic police officials.
The scammers spoofed official police phone numbers to make it appear as though they were calling from the Bengaluru Traffic Police Department. Victims were falsely informed of traffic violations or hit-and-run cases and were threatened with immediate arrest unless they paid a fine electronically. This case highlights the increasing misuse of VoIP and caller ID spoofing in financial fraud and identity theft scams.
The scam prompted widespread panic among citizens, leading to a police investigation and a public advisory warning people to be cautious about such fraudulent calls.
2. Modus Operandi (How the Scam Worked)
Step 1: Caller ID Spoofing Using VoIP Technology
- Scammers used VoIP applications to manipulate caller ID information to make it appear as though the call was coming from an official Bengaluru Traffic Police number.
- Caller ID spoofing is difficult to detect, as the phone screen displays the official police number rather than the fraudster’s real number.
Step 2: Threatening the Victim
- The fraudsters pretended to be senior traffic police officers and called unsuspecting victims.
- They falsely claimed that the victim had been involved in a traffic violation, accident, or hit-and-run case.
- The scammers intimidated the victims by saying that they would be arrested immediately unless they settled the matter.
Step 3: Coercing the Victim to Pay a ‘Fine’
- To avoid arrest, the victims were pressured to pay a hefty fine to the traffic department.
- The scammers provided fake bank account details or demanded payment via UPI, cryptocurrency, or gift cards to avoid detection.
- In some cases, victims were even coerced into transferring money multiple times, with scammers claiming that the first transaction had “failed.”
Step 4: Disappearing Without a Trace
- Since the calls were made using VoIP and spoofed numbers, it became difficult to trace the fraudsters.
- Once the money was transferred, the scammers would block the victim’s number or change their contact details, making further communication impossible.
3. Immediate Response and Investigation
Public Awareness Campaign by Bengaluru Traffic Police
- After multiple complaints, the Bengaluru Traffic Police issued a public alert warning people not to trust calls demanding payments for traffic violations.
- They clarified that all official traffic fines are only communicated through government portals, SMS, or official notices, and not through phone calls.
Police Investigation to Trace Fraudsters
- Cybercrime officials began analyzing call logs and payment records to track down the fraudsters.
- The use of VoIP made it difficult to trace the actual location of the calls, as scammers could use foreign servers to route their calls.
- Authorities collaborated with telecom companies to detect patterns of spoofed calls and take preventive measures.
4. Legal and Regulatory Framework
Indian Laws Related to VoIP Scams and Caller ID Spoofing
- Indian Telegraph Act, Section 25(c): Caller ID spoofing is illegal in India and is punishable by a fine or imprisonment of up to three years.
- Information Technology Act, 2000: Cyber fraud and identity theft through digital means are punishable under Sections 66C and 66D.
- Indian Penal Code (IPC): Extortion and cheating through impersonation are covered under Sections 419 and 420, with up to seven years of imprisonment.
Challenges in Law Enforcement
- International VoIP services make it difficult to trace fraudsters because they use servers in different countries.
- Many spoofing apps are available on the dark web, allowing scammers to change caller IDs easily.
- Lack of digital awareness among the public makes it easy for scammers to manipulate victims.
5. Lessons Learned and Preventive Measures
How to Identify and Avoid VoIP Call Scams
✔ Be skeptical of phone calls from unknown numbers claiming to be from police departments.
✔ Check official government websites (e.g., Bengaluru Traffic Police portal) for pending fines instead of trusting calls.
✔ Never share sensitive information like Aadhar details, OTPs, or bank credentials over the phone.
✔ If you receive a suspicious call, hang up and report it to cybercrime authorities at 1930 or https://cybercrime.gov.in/.
Government and Telecom Measures to Prevent Such Scams
✔ Telecom providers are blocking caller ID spoofing services and blacklisting scam-related numbers.
✔ The Indian government is working with international agencies to trace and shut down fraudulent VoIP operations.
✔ Awareness programs are being conducted to educate citizens about online scams and fraudulent calls.
6. Conclusion
The Bengaluru Traffic Police impersonation scam is a prime example of how VoIP and caller ID spoofing are being misused to deceive innocent citizens. The case underscores the urgent need for public awareness, improved cybersecurity laws, and better law enforcement coordination to tackle digital fraud.
Key Takeaways from the Case:
Scammers used VoIP technology to spoof official police numbers and threaten victims.
Victims were coerced into paying large sums of money to avoid false arrests.
Bengaluru Traffic Police issued warnings to alert the public.
Law enforcement faced challenges in tracing VoIP-based fraudsters due to international routing.
Citizens should always verify such calls and report them to cybercrime authorities.